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LISTING OF CLAIMS : 

1. (previously presented) A method for ensuring the 
integrity of at least one computer software program which can be 
carried out by means of at least one encryption/decryption 
module, the at least one computer software program being 
transmitted, by means of a transmitter, to a decoder which is 
equipped with the at least one encryption/decryption module by 
means of a long-distance information transmission network, the 
transmitter performing the steps comprising: 

a) a step (40) for encrypting information signals 
transmitted to the decoder, 

b) a step (50) for transmitting, to the at least one 
encryption/decryption module of the decoder, a message containing 
the information required for the decoder to decrypt the 
information signals transmitted at step a) , and 

c) a step (42, 100) for transmitting the at least one 
computer software program to the at least one 
encryption/decryption module of the decoder, 

the decoder carrying out: 

d) a step (74) for decrypting the information signals 
transmitted by the transmitter during step a) using the 
information provided for this purpose in the message transmitted 
during step b) , 
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e) a step for constructing a single identifier for a 
group of several computer software programs to be transmitted 
during step c) based on information relating to each of the 
software programs of the group and in that the at least one 
encryption/decryption module carries out the same operation as 
that carried out during step e) in order to reconstruct a unique 
identifier corresponding to that constructed during step e) if 
the group received by the decoder is identical to that 
transmitted by the transmitter, 

wherein, 

the transmitter inserts (at 52, 124) in the message 
transmitted during step b) an additional item of information 
which allows the at least one encryption/decryption module to 
verify that it has effectively received the or each computer 
software program transmitted at step c) , 

the at least one encryption/decryption module verifies 
(at 60), based on the additional information inserted by the 
transmitter in the message transmitted during step b) , whether it 
has effectively received the or each software program transmitted 
during step c) , and 

if the or each software program has not been 
received, the at least one encryption/decryption module prevents 
step d) (at 68) . 



3 



Docket No. 0512-1290 
Appln. No. 10/542,630 

2. (previously presented) The method according to 
claim 1, wherein the transmitter encrypts (at 50) the message 
transmitted at step b) , and in that the at least one 
encryption/decryption module decrypts the message transmitted 
during step b) in order to allow step d) to be carried out. 

3. (previously presented) The method according to 
claim 1, wherein the transmitter carries out: 

f) a step (52, 124) for inserting this identifier in 
the message transmitted during step b) , 

and in that the at least one encryption/decryption 
module carries out: 

g) a step (62, 110) for reconstructing the identifier 
of the or each computer software program based on the or each 
computer software program received, 

h) a step (66, 112) for comparing the identifier 
reconstructed at step g) with the identifier inserted by the 
transmitter during step f ) , and 

i) if the identifier reconstructed at step g) does not 
correspond to that inserted at step f) in the message transmitted 
at step b) , a step (68, 108) for preventing step d) , 

j) if the identifier reconstructed at step g) 
corresponds to the identifier inserted at step f) in the message 
transmitted during step b) , a step (66, 112) for validating the 
integrity of the or each computer software program. 
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4. (cancelled) 

5. (previously presented) The method according to 
claim 3, wherein the steps d) , g) , h) , i) and j) are carried out 
by the same encryption/decryption module. 

6. (previously presented) The method according to 
claim 3, wherein a first autonomous encryption/decryption module 
carries out only steps d) , h) , i) and j ) , and in that a second 
autonomous encryption/decryption module which is independent from 
the first encryption/decryption module and which is fixedly 
joined to the decoder carries out at least step g) . 

7. (previously presented) The method according to 
claim 6, wherein the transmitter further performing the 
steps comprising: 

k) a second step (120) for constructing a second 
identifier of the or each computer software program transmitted 
during step c) , this second identifier being transmitted together 
with the or each corresponding software program during step c) r 
and 

- in that step g) which is carried out by the second 
encryption/decryption module comprises : 
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- an operation (102) for reconstructing the second 
identifier which is transmitted together with the or each 
software program, 

only if the second reconstructed identifier 
corresponds to that transmitted together with the or each 
software program during step c) , an operation (110) for 
reconstructing the first identifier inserted in the message 
transmitted during step b) and for transmitting this first 
reconstructed identifier to the first encryption/decryption 
module so that the first encryption/decryption module can carry 
out step h) . 

8. (previously presented) The method according to 
claim 7, wherein the first and the second identifiers are 
obtained from the same identifier of the or each computer 
software program by encrypting the same identifier using a 
different first and second encryption key, respectively. 

9. (previously presented) The method according to 
claim 2, wherein the at least one encryption/decryption module 
carries out the at least one computer software program each time 
the integrity thereof is validated during step j). 
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10. (previously presented) An information recording 
medium (12) with a computer program recorded thereon comprising 
instructions for carrying out a method according to claim 1, when 
the instructions are carried out by the transmitter (4) . 

11. (previously presented) An information recording 
medium (22, 88) with a computer program recorded thereon 
comprising instructions for carrying out a method according to 
claim 1, when the instructions are to be carried out by the at 
least one encryption/decryption module. 

12. (previously presented) A system for ensuring the 
integrity of at least one computer software program which can be 
carried out by at least one encryption/decryption module (16, 
84), the system comprising: 

a transmitter (4) for transmitting the at least one 
computer software program via a long-distance information 
transmission network (8), and a decoder (6, 82) which is equipped 
with the at least one encryption/decryption module (16, 84), 

the transmitter (4) being capable of: 

- encrypting information signals transmitted to the or 
each decoder, 
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transmitting to the at least one 

encryption/decryption module of the decoder a message containing 
the information required for the decoder to decrypt the 
information signals transmitted, and 

- transmitting the at least one computer software 
program to the at least one encryption/decryption module of 
the decoder, 

- the decoder (6, 82) being capable of decrypting the 
information signals transmitted by the transmitter using the 
information which is provided for this purpose and which is 
contained in the message transmitted by the transmitter, 

- constructing a single identifier for a group of 
several computer software programs to be transmitted during the 
transmitting the at least one computer software program to the at 
least one encryption/decryption module of the decoder based on 
information relating to each of the software programs of the 
group and in that the at least one encryption/decryption module 
carries out the same operation as that carried out during 
constucting in order to reconstruct a unique identifier 
corresponding to that constructed during constucting if the group 
received by the decoder is identical to that transmitted by 
the transmitter, 
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wherein, the transmitter (4) is capable of inserting in 
the message an additional item of information which allows the at 
least one encryption/decryption module (46, 84) to verify that it 
has received the or each computer software program transmitted, 

the at least one encryption/decryption module (16, 84) 
is capable of verifying, based on the additional information 
inserted by the transmitter in the message, whether it has 
effectively received the or each software program transmitted by 
the transmitter, and 

if the or each software program has not been received, 
the at least one encryption/decryption module (16, 84) is capable 
of preventing the decryption of the information signals 
transmitted . 

13. (previously presented) The system according to 
claim 12, wherein the or each decoder (6) is equipped with a 
single removable encryption/decryption module. 

14. (previously presented) The system according to 
claim 12, wherein the or each decoder (82) is equipped with at 
least two autonomous encryption/decryption modules which are 
independent from each other, at least one of these 
encryption/decryption modules being fixedly joined to the body of 
the decoder. 
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15. (previously presented) A transmitter (4) which is 
suitable for carrying out a method according to claim 1, this 
transmitter (4) being capable of: 

- encrypting information signals transmitted to the or 
each decoder, 

transmitting to the at least one 

encryption/decryption module of the decoder a message containing 
the information required for the decoder to decrypt the 
information signals transmitted, and 

- transmitting the at least one computer software 
program to the at least one encryption/decryption module of the 
decoder, 

wherein 

the transmitter (4) is capable of inserting in the 
message an additional item of information which allows the at 
least one encryption/decryption module (46, 84) to verify that it 
has received the or each computer software program transmitted. 

16. (previously presented) The decoder (6, 82) which is 
suitable for carrying out a method according to claim 1, this 
decoder (6, 82) being capable of decrypting the information 
signals transmitted by the transmitter using the information 
which is provided for this purpose and which is contained in the 
message transmitted by the transmitter, and being equipped with 
the at least one encryption/decryption module (16, 84); 
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wherein, 

the at least one encryption/decryption module (16, 84) 
is capable of verifying, based on the additional information 
inserted by the transmitter in the message, whether it has 
effectively received the or each software program transmitted by 
the transmitter, and 

if the or each software program has not been received, 
the at least one encryption/decryption module (16, 84) is capable 
of preventing the decryption of the information signals 
transmitted . 

17. (previously presented) The decoder (6, 82) 
according to claim 16, wherein the decoder is equipped with a 
single removable encryption/decryption module. 

18. (previously presented) The decoder (6, 82) 
according to claim 16, wherein the decoder is equipped with at 
least two autonomous encryption/decryption modules which are 
independent from each other, at least one of these 
encryption/decryption modules being fixedly joined to the body of 
the decoder. 

19. (previously presented) The method according to 
claim 2, the transmitter carries out: 
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f) a step (52, 124) for inserting this identifier in 
the message transmitted during step b) , 

and in that the at least one encryption/decryption 
module carries out: 

g) a step (62, 110) for reconstructing the identifier 
of the or each computer software program based on the or each 
computer software program received, 

h) a step (66, 112) for comparing the identifier 
reconstructed at step g) with the identifier inserted by the 
transmitter during step f), and 

i) if the identifier reconstructed at step g) does not 
correspond to that inserted at step f) in the message transmitted 
at step b) , a step (68, 108) for preventing step d) , 

j) if the identifier reconstructed at step g) 
corresponds to the identifier inserted at step f) in the message 
transmitted during step b) , a step (66, 112) for validating the 
integrity of the or each computer software program. 

2 0 . (previously presented) Method according to claim 1, 
wherein a first autonomous encryption/decryption module carries 
out only steps d) , h) , i) and j), and in that a second autonomous 
encryption/decryption module which is independent from the first 
encryption/decryption module and which is fixedly joined to the 
decoder carries out at least step g) . 
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